
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/2AFB9BC6382911F1B2B588E49D833773.roa
File: 2AFB9BC6382911F1B2B588E49D833773.roa (raw, json)
Hash identifier: 7oPrd52StlbPHVgjeAzibMLZq71lKJ7JS9rLriloeWc=
Subject key identifier: 7B:0D:C8:16:87:A1:16:68:B5:B5:FE:9D:44:03:0D:E7:13:31:D3:4C
Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial: 0190
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/2AFB9BC6382911F1B2B588E49D833773.roa
Signing time: Tue 14 Apr 2026 17:41:29 +0000
ROA not before: Tue 14 Apr 2026 17:41:29 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137830
IP address blocks: 103.40.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Validity
Not Before: Apr 14 17:41:29 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69de7c49-f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:91:70:c4:02:2c:7e:dd:c8:1b:db:a6:24:
e0:32:5f:15:e1:49:ed:e6:62:e0:75:37:f4:be:fa:
5f:e0:7d:00:90:1f:db:4a:29:74:bc:63:12:11:d9:
1b:62:57:2a:4d:d3:e0:d8:cb:97:5c:c0:c6:ba:52:
4e:4f:f9:70:e1:67:76:f5:b0:6a:e0:35:42:fa:b2:
b5:04:60:19:28:54:78:c5:fc:e4:bc:cb:06:22:34:
27:08:88:5c:3a:15:bb:aa:5f:2b:64:46:92:04:76:
2a:44:bb:d2:60:f4:6f:f6:c1:0b:25:dd:d4:39:8e:
76:9f:b0:10:32:8c:9a:50:63:f2:b2:4b:a1:55:cb:
6b:d1:64:54:b9:58:5d:05:7e:68:33:02:4b:67:61:
12:32:b0:62:9b:9b:c6:40:ab:a1:43:9a:99:0e:e9:
b6:36:59:fe:1a:72:6a:82:49:e4:1f:c8:7a:bc:7f:
e7:de:7f:9e:54:9c:8d:e3:65:d7:1c:a7:8d:ee:14:
9f:21:f6:5a:02:b9:87:e5:6d:d0:1c:2d:c8:75:f1:
56:c8:0d:f2:4b:b3:ec:51:f5:b8:cd:ce:28:73:28:
6e:42:78:bd:b7:78:bb:65:fc:fd:58:01:fb:f0:91:
50:65:7b:5d:58:0f:50:26:d2:1c:0d:f3:1a:05:e7:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:C8:16:87:A1:16:68:B5:B5:FE:9D:44:03:0D:E7:13:31:D3:4C
X509v3 Authority Key Identifier:
keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/2AFB9BC6382911F1B2B588E49D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.40.52.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:02:42:50:5e:e6:7f:23:9d:d8:a7:98:31:d9:62:4b:e5:3c:
e2:e6:d0:f1:22:c2:4e:5e:50:42:ab:44:15:37:cb:63:0b:af:
a6:6c:66:73:20:9b:48:a1:09:ff:71:9e:83:14:51:5a:3d:4a:
bf:62:d4:de:47:d5:c2:87:29:bb:0b:93:d6:f6:4a:ed:db:e0:
a3:63:87:4b:0f:b0:1c:a3:b1:07:ce:05:6f:96:aa:d5:1e:a5:
f6:4f:53:0e:8c:5b:4f:44:f0:fd:19:3c:6d:0b:3d:65:7c:23:
1b:80:45:d5:96:63:d2:7a:20:f1:df:71:66:ac:0e:8c:2d:74:
d5:42:ba:cb:49:66:23:6c:a3:1a:ed:23:37:f0:f9:44:eb:97:
ba:53:c4:81:ee:e3:b9:0f:60:00:96:b8:c0:12:1b:69:3d:39:
8c:5e:fd:0b:6c:93:c6:b0:d4:74:97:5b:4e:3d:c2:e1:42:e6:
e0:e3:48:c9:2e:ee:ec:85:69:33:90:f5:b8:dc:e4:2c:f3:fa:
5a:9d:cd:de:54:74:c7:1e:91:85:05:3c:79:2c:e8:ee:40:53:
b0:e3:71:84:d1:d1:10:e7:e0:c0:e4:ef:84:07:eb:ca:6d:db:
b2:1b:5e:28:e2:b1:e9:aa:f0:2b:91:3c:90:14:5b:c0:b1:7d:
70:93:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:08 2026 by rpki-client